Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
Liferay Portal and Liferay DXP Fails to Sanitize API Data
Openstack cinder Improper handling of ScaleIO backend credentials
ChakraCore RCE Vulnerability
OpenCart Cross-site Scripting
Comments plugin stored Cross-site Scripting (XSS) via an asset volume name
Comments plugin stored Cross-site Scripting via a guest name
Comments plugin Cross-Site Request Forgery (CSRF)
CSRF vulnerability in Jenkins Swarm Plugin
Missing permission check in Jenkins Project Inheritance Plugin
OS command injection vulnerability in Jenkins Play Framework Plugin
XSS vulnerability in Jenkins Subversion Partial Release Manager Plugin
Missing permission check in Jenkins Project Inheritance Plugin
Improper Neutralization of Input During Web Page Generation in Jenkins Script Security Plugin
Improper permission checks in Jenkins Swarm Plugin
Stored XSS vulnerability in Jenkins Compact Columns Plugin
Complete lack of CSRF protection in Jenkins Selenium Plugin can lead to OS command injection
Stored XSS vulnerability in Jenkins ECharts API Plugin
Stored XSS vulnerability in Jenkins ECharts API Plugin
MediaWiki Open Redirect vulnerability
Fork CMS Cross-site Scripting Vulnerability
Knock Knock plugin Open redirection vulnerability
Centreon Sensitive Data Exposure vulnerability
Knock Knock plugin IP Whitelist bypass via an X-Forwarded-For HTTP header
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.